A brief analysis of log filter and normalization in SOC
Wang Guo-jun · Qiye jishu kaifa · 2009
As long as the scale of network grows larger and larger,people pay more attention to security devices centralized management.This paper briefly introduced the basic principle of Security Operation Center(SOC) and pointed out the importance of log preprocessing in this system.By analyzing the filter module and the normalization module in log preprocessing,it gave a workable design of the two modules.